VYPR

Thinkpad R14 Firmware

by Lenovo

CVEs (3)

  • CVE-2020-8336MedJun 9, 2020
    risk 0.42cvss 6.4epss 0.00

    Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.

  • CVE-2020-8323MedJun 9, 2020
    risk 0.42cvss 6.4epss 0.00

    A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.

  • CVE-2020-8320MedJun 9, 2020
    risk 0.42cvss 6.4epss 0.00

    An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.